This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/3ece76-0575-46b1-94bf-06329f6e0475/1/435CoUa5C6fNMxrWoT7vHaL7pEA.mft File: 435CoUa5C6fNMxrWoT7vHaL7pEA.mft (raw, json) Hash identifier: RVAS0PVX5GgX0t6K2kqLzUsvWmukzplxny/XK9BFfNc= Subject key identifier: 20:31:BF:02:B1:3A:14:7A:09:D4:78:D8:82:0E:3E:B8:C8:98:C0:94 Authority key identifier: E3:7E:42:A1:46:B9:0B:A7:CD:33:1A:D6:A1:3E:EF:1D:A2:FB:A4:40 Certificate issuer: /CN=e37e42a146b90ba7cd331ad6a13eef1da2fba440 Certificate serial: 019AF1D20A5D61472BC30DA394DAED2696DA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/435CoUa5C6fNMxrWoT7vHaL7pEA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/3ece76-0575-46b1-94bf-06329f6e0475/1/435CoUa5C6fNMxrWoT7vHaL7pEA.mft Manifest number: 096E Signing time: Sat 06 Dec 2025 04:01:05 +0000 Manifest this update: Sat 06 Dec 2025 04:01:05 +0000 Manifest next update: Sun 07 Dec 2025 04:01:05 +0000 Files and hashes: 1: 435CoUa5C6fNMxrWoT7vHaL7pEA.crl (hash: 6KAgd30kZtA2hg0Yq1aJ0coVR8/tzBin+tSMSSjV9vM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/3ece76-0575-46b1-94bf-06329f6e0475/1/435CoUa5C6fNMxrWoT7vHaL7pEA.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/3ece76-0575-46b1-94bf-06329f6e0475/1/435CoUa5C6fNMxrWoT7vHaL7pEA.mft rsync://rpki.ripe.net/repository/DEFAULT/435CoUa5C6fNMxrWoT7vHaL7pEA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:0a:5d:61:47:2b:c3:0d:a3:94:da:ed:26:96:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e37e42a146b90ba7cd331ad6a13eef1da2fba440 Validity Not Before: Dec 6 04:01:05 2025 GMT Not After : Dec 7 04:01:05 2025 GMT Subject: CN=2031bf02b13a147a09d478d8820e3eb8c898c094 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:d9:67:78:8b:79:08:fd:41:8f:28:23:1f:ac: d3:98:ee:f1:68:82:42:b7:7c:53:14:87:d2:bd:44: 9f:83:50:37:ee:fc:75:bf:94:ca:22:ae:90:4f:b7: 24:6d:1b:eb:32:6e:dc:99:49:b1:3e:a3:72:36:98: e5:28:49:f3:0e:b7:0f:d1:6e:c1:ac:d4:8f:fc:67: 76:20:8e:e1:37:6e:37:a4:06:6f:8b:63:da:15:a0: 2a:4f:3c:ca:65:52:6c:b1:5f:da:25:bb:99:00:10: 76:e4:a0:88:e8:81:1f:dd:94:98:be:58:7a:e8:e2: 9d:8e:5a:0c:fd:16:9b:f7:b4:08:cf:81:c1:35:c7: 94:3e:75:fe:2f:0b:df:7b:b0:39:de:15:e9:92:b4: 5d:48:ca:7e:85:94:71:d6:27:ab:a3:fc:0b:62:74: 17:4f:9e:78:bd:ca:4b:5c:22:d7:d0:78:46:4f:e6: ea:48:b3:41:ca:f2:19:5d:45:bc:5a:75:9a:98:ce: 52:5c:51:15:7c:ca:55:9e:f2:3b:f9:b3:12:42:d2: 7d:55:69:85:41:b3:25:60:6c:72:35:29:ac:73:06: 32:5d:17:1f:17:93:61:62:ec:ca:61:ea:f0:6f:4a: d5:9c:95:77:fc:a0:87:9a:a0:c3:a0:02:dc:15:10: 1e:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:31:BF:02:B1:3A:14:7A:09:D4:78:D8:82:0E:3E:B8:C8:98:C0:94 X509v3 Authority Key Identifier: keyid:E3:7E:42:A1:46:B9:0B:A7:CD:33:1A:D6:A1:3E:EF:1D:A2:FB:A4:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/435CoUa5C6fNMxrWoT7vHaL7pEA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/3ece76-0575-46b1-94bf-06329f6e0475/1/435CoUa5C6fNMxrWoT7vHaL7pEA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/3ece76-0575-46b1-94bf-06329f6e0475/1/435CoUa5C6fNMxrWoT7vHaL7pEA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:6d:49:17:1a:44:3d:42:6b:be:b1:af:b9:7a:9a:c3:5a:e1: f5:39:43:c6:d9:b0:06:a5:11:c3:7b:3c:64:52:b8:76:62:11: 52:e1:86:f5:b1:72:e6:77:de:ab:47:10:74:79:c1:17:e8:6c: d1:8b:93:e7:43:9c:ec:18:b9:81:44:0b:71:22:6f:3d:29:f2: cf:02:d9:3b:56:67:4a:03:b0:85:3d:91:bb:ec:68:de:fc:07: 59:16:6a:27:9e:39:19:11:2a:dd:ce:87:6b:ac:ba:df:d7:57: dc:52:00:5e:f0:26:6e:71:49:e8:27:3d:a5:07:0f:00:75:3c: 3b:6b:7e:62:a2:86:14:60:30:3c:83:1d:b0:1f:66:7f:c0:7f: ba:31:de:26:7b:0e:d6:0c:fb:ba:18:fa:df:86:72:7e:4f:33: 13:6b:c4:af:15:3e:0d:4a:96:cb:fc:47:d1:b0:bc:c5:b2:02: a4:1d:31:99:e5:bd:55:a6:f3:1b:61:24:db:b2:a7:15:d2:67: bc:b5:b2:b1:b9:7d:b6:52:60:80:44:18:45:60:30:e6:cd:4b: 58:e9:b6:c4:00:28:e9:75:29:04:b6:e3:2c:4e:4b:18:ec:df: 3a:27:1d:d8:1d:3e:15:23:6c:9a:47:d4:91:d0:e5:82:40:f9: 76:7e:3c:3e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0gpdYUcrww2jlNrtJpbaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUzN2U0MmExNDZiOTBiYTdjZDMzMWFkNmExM2VlZjFkYTJm YmE0NDAwHhcNMjUxMjA2MDQwMTA1WhcNMjUxMjA3MDQwMTA1WjAzMTEwLwYDVQQD EygyMDMxYmYwMmIxM2ExNDdhMDlkNDc4ZDg4MjBlM2ViOGM4OThjMDk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqdlneIt5CP1BjygjH6zTmO7xaIJC t3xTFIfSvUSfg1A37vx1v5TKIq6QT7ckbRvrMm7cmUmxPqNyNpjlKEnzDrcP0W7B rNSP/Gd2II7hN243pAZvi2PaFaAqTzzKZVJssV/aJbuZABB25KCI6IEf3ZSYvlh6 6OKdjloM/Rab97QIz4HBNceUPnX+Lwvfe7A53hXpkrRdSMp+hZRx1iero/wLYnQX T554vcpLXCLX0HhGT+bqSLNByvIZXUW8WnWamM5SXFEVfMpVnvI7+bMSQtJ9VWmF QbMlYGxyNSmscwYyXRcfF5NhYuzKYerwb0rVnJV3/KCHmqDDoALcFRAeCwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCAxvwKxOhR6CdR42IIOPrjImMCUMB8GA1UdIwQY MBaAFON+QqFGuQunzTMa1qE+7x2i+6RAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNDM1Q29VYTVDNmZOTXhyV29UN3ZIYUw3cEVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC8zZWNlNzYtMDU3NS00NmIxLTk0YmYt MDYzMjlmNmUwNDc1LzEvNDM1Q29VYTVDNmZOTXhyV29UN3ZIYUw3cEVBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMC8zZWNlNzYtMDU3NS00NmIxLTk0YmYtMDYzMjlmNmUwNDc1 LzEvNDM1Q29VYTVDNmZOTXhyV29UN3ZIYUw3cEVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUG1JFxpE PUJrvrGvuXqaw1rh9TlDxtmwBqURw3s8ZFK4dmIRUuGG9bFy5nfeq0cQdHnBF+hs 0YuT50Oc7Bi5gUQLcSJvPSnyzwLZO1ZnSgOwhT2Ru+xo3vwHWRZqJ545GREq3c6H a6y639dX3FIAXvAmbnFJ6Cc9pQcPAHU8O2t+YqKGFGAwPIMdsB9mf8B/ujHeJnsO 1gz7uhj634Zyfk8zE2vErxU+DUqWy/xH0bC8xbICpB0xmeW9VabzG2Ek27KnFdJn vLWysbl9tlJggEQYRWAw5s1LWOm2xAAo6XUpBLbjLE5LGOzfOicd2B0+FSNsmkfU kdDlgkD5dn48Pg== -----END CERTIFICATE-----Generated at Sat Dec 6 10:42:11 2025 by rpki-client